General
- Target 2026-07-20_a738af37a4d5da79466af5cb1713a92b_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 14.9MB
- Sample260720-jf47aaas8l
- SHA256 107be5bdb240f3cde754745b46dd93456e2ffe190b77f668343e525825f82019
- MD5 a738af37a4d5da79466af5cb1713a92b
- SHA1 803764d3792adf35c7b25249c6acb6df5e20494c
- SHA512 b87dcc7abe649e8339fabd540c13ae1f44ed14faf73bd43fae230d86444c8b5f057b939621d3a12db2f5173e9069f2b4ba025ac149471428d65ac6f84ff9b3e6
- SSDEEP 196608:HV0d8dseGZF6bUpMBF1p/kjRm4OWi2bAmHpn6F44IAWv1dBjG:H6IbUwF1VERmj2bAmHN6+JrvFy
- TLSH T18CF6AD6162E761FCE0BFE1398A368731E6727C130931934F12BCD65A2F636546D29B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-20_a738af37a4d5da79466af5cb1713a92b_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_a738af37a4d5da79466af5cb1713a92b_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hi.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_a738af37a4d5da79466af5cb1713a92b_amadey_cobalt-strike_coinminer_elex_glassworm_hawkeye_hijackloader_icedid_luca-stealer_njrat_remcos_smoke-loader_vidar
- Size 14.9MB
- SHA256 107be5bdb240f3cde754745b46dd93456e2ffe190b77f668343e525825f82019
- MD5 a738af37a4d5da79466af5cb1713a92b
- SHA1 803764d3792adf35c7b25249c6acb6df5e20494c
- SHA512 b87dcc7abe649e8339fabd540c13ae1f44ed14faf73bd43fae230d86444c8b5f057b939621d3a12db2f5173e9069f2b4ba025ac149471428d65ac6f84ff9b3e6
- SSDEEP 196608:HV0d8dseGZF6bUpMBF1p/kjRm4OWi2bAmHpn6F44IAWv1dBjG:H6IbUwF1VERmj2bAmHN6+JrvFy
- TLSH T18CF6AD6162E761FCE0BFE1398A368731E6727C130931934F12BCD65A2F636546D29B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
UPX dump on OEP (original entry point)
-
Drops file in System32 directory